6a3e1833f43f867e153935467c1a7c1f7f9c2c4b7b4c716a54f959989f091bf2

Resubmissions

16/03/2024, 15:20

16/03/2024, 15:16

max time kernel
10s
max time network
20s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/03/2024, 15:16

Target
Trojan/0xc6666666.exe
Size 9KB
Sample240316-sns9esdf21
SHA256 8ef6ca3e52d30dfaf0df411fc670f899506ca19cbfe1a35c9ff417acf93252da
MD5 8b07df8ab7160c2692e9f86334b3678e
SHA1 ae11b4de120f9e87a2dbea10a5102ef3055aa859
SHA512 b69cf80172d82ceb7a3c878167e5e6bfd60e93b2c91afb834241f40a3829a5b57a88897d0e09e4b80a98732e4967d7e689f28ccb4975d9a68acc9941eed4b212
SSDEEP 192:9+OXjfrOVqKnwzjOhfwN7E5pz6rJoZgW0AX:7TfCVNnqjFN7mOW0c
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1952	0xc6666666.exe

C:\Users\Admin\AppData\Local\Temp\Trojan\0xc6666666.exe
"C:\Users\Admin\AppData\Local\Temp\Trojan\0xc6666666.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1952